Kyrytow, Stefan wrote:
> To start off I am new to subversion so I am having some difficulty
> picking which server version to use (Apache + mod_dav_svn or svnserve).
> [snip]
I started out using Apache+mod_dav_svn exclusively, to keep the
authentication consistent with our internal LDAP based workstation auth.
LAN workers used http: access, and offsite workers use https: through
the NAT firewall.
We never ended up adding any per-directory/group access controls, so I
ended up expanding my LAN users' options to svnserve as well. svnserve
authentication currently doesn't tie-in with LDAP, but our LAN is secure
enough that I just maintain a separate pass-db in a secured directory
for svnserve access. I am waiting for the day svnserve can just use
standard PAM/host authentication, which I can then tie into our current
LDAP system.
svn+ssh to svnserve might be an option for you, if your Subversion LDAP
authentication setup parallels your other server access permissions. You
need to set up an ssh client that can cache the password on all the
client workstations -- otherwise the repeated password requests get
really annoying.
> Office Users:
> connect to server over LAN
> use Eclipse IDE
> authenticate to domain through LDAP
If you trust your LAN, you can make all read-only operations anonymous,
which can speed up Update times a little by eliminating the
authentication-per-access step.
> Remote Users:
> connect to server over Internet
> use various IDE's
Make sure remote users always use an encrypted form of access, like a
VPN tunnel, ssh, or https (SSL). In my configuration, https access was
the easiest choice.
> Web: Apache/1.3.33 (Darwin)
I believe you need to upgrade to Apache 2 in order to use mod_dav_svn.
As always the svnbook is a better source of precise information.
Thanks,
Jared
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Wed Apr 12 22:14:11 2006